CVE-2016-20090: Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path
Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-20090?
The severity of CVE-2016-20090 is rated high, with a score of 8.5.
How do I fix CVE-2016-20090?
To fix CVE-2016-20090, update the Comodo Dragon Browser to a version beyond 52.15.25.663.
What is the risk associated with CVE-2016-20090?
CVE-2016-20090 has a risk rating of 73, indicating a significant potential for exploitation.
What type of vulnerability is CVE-2016-20090?
CVE-2016-20090 is a privilege escalation vulnerability due to an unquoted service path.
Which service is affected by CVE-2016-20090?
The DragonUpdater service in Comodo Dragon Browser is affected by CVE-2016-20090.